secure vars wasn't working